Log of /updates

---

Revision 1470780 - Directory Listing
Modified Fri Dec 27 12:04:09 2019 UTC (4 years, 9 months ago) by mokraemer

new version 4.9.3

---

Revision 1470775 - Directory Listing
Modified Fri Dec 27 11:51:09 2019 UTC (4 years, 9 months ago) by mokraemer

new version fixes mga#25953, CVE-2019-15026

---

Revision 1470711 - Directory Listing
Modified Fri Dec 27 11:09:49 2019 UTC (4 years, 9 months ago) by ns80

- add patch from Fedora for CVE-2019-12211 and 2019-12213 (mga#25967)

---

Revision 1470515 - Directory Listing
Modified Fri Dec 27 10:33:26 2019 UTC (4 years, 9 months ago) by ns80

- add patch for CVE-2019-17064 (mga#25973)

---

Revision 1470248 - Directory Listing
Modified Fri Dec 27 09:26:18 2019 UTC (4 years, 9 months ago) by daviddavid

- add upstream patch to fix CVE-2019-16707 (mga#25963)

---

Revision 1470226 - Directory Listing
Modified Fri Dec 27 06:45:35 2019 UTC (4 years, 9 months ago) by daviddavid

- new version: 20191104, fixes CVE-2019-14249 (mga#25955)

---

Revision 1470224 - Directory Listing
Modified Fri Dec 27 06:40:19 2019 UTC (4 years, 9 months ago) by daviddavid

- new version: 6.3.1, fixes new security issue VSV00004 (mga#25960)
- now libmajor is 2

---

Revision 1470221 - Directory Listing
Modified Fri Dec 27 06:30:58 2019 UTC (4 years, 9 months ago) by wally

%repsys markrelease
version: 2.2.0
release: 1.mga7
revision: 1470213

Copying 2.2.0-1.mga7 to releases/ directory.

---

Revision 1470220 - Directory Listing
Modified Fri Dec 27 06:30:56 2019 UTC (4 years, 9 months ago) by wally

Copying release 2.2.0-1.mga7 to pristine/ directory.

---

Revision 1470219 - Directory Listing
Modified Fri Dec 27 06:30:53 2019 UTC (4 years, 9 months ago) by wally

Removing previous pristine/ directory.

---

Revision 1470218 - Directory Listing
Modified Fri Dec 27 06:30:51 2019 UTC (4 years, 9 months ago) by wally

Created directory for version 2.2.0.

---

Revision 1470213 - Directory Listing
Modified Fri Dec 27 06:18:13 2019 UTC (4 years, 9 months ago) by wally

- new version 2.2.0 to fix CVE-2019-12290 and CVE-2019-18224 (mga#25652)

---

Revision 1470204 - Directory Listing
Modified Fri Dec 27 06:10:44 2019 UTC (4 years, 9 months ago) by wally

%repsys markrelease
version: 3.04
release: 1.mga7
revision: 1470200

Copying 3.04-1.mga7 to releases/ directory.

---

Revision 1470203 - Directory Listing
Modified Fri Dec 27 06:10:42 2019 UTC (4 years, 9 months ago) by wally

Copying release 3.04-1.mga7 to pristine/ directory.

---

Revision 1470202 - Directory Listing
Modified Fri Dec 27 06:10:40 2019 UTC (4 years, 9 months ago) by wally

Removing previous pristine/ directory.

---

Revision 1470201 - Directory Listing
Modified Fri Dec 27 06:10:38 2019 UTC (4 years, 9 months ago) by wally

Created directory for version 3.04.

---

Revision 1470200 - Directory Listing
Modified Fri Dec 27 06:06:28 2019 UTC (4 years, 9 months ago) by wally

- new version 3.04 to fix CVE-2019-19035, CVE-2019-1010301 and CVE-2019-1010302 (mga#25938)

---

Revision 1470093 - Directory Listing
Modified Thu Dec 26 11:13:52 2019 UTC (4 years, 9 months ago) by shlomif

CVE-2018-20349 ( MGA#25937 ) - backport.

---

Revision 1470084 - Directory Listing
Modified Thu Dec 26 09:42:07 2019 UTC (4 years, 9 months ago) by ns80

- sync with fedora for CVE-2018-7866, CVE-2018-7873, CVE-2018-7876, CVE-2018-9009, CVE-2018-9132 (mga#25957)

---

Revision 1470079 - Directory Listing
Modified Thu Dec 26 04:19:52 2019 UTC (4 years, 9 months ago) by tv

- Avoid panic when last value of search-and-replace is tainted and UTF-8
  (RT#134409)
- Fix overloading for binary and octal floats (RT#125557)
- Fix handling undefined array members in Dumpvalue (RT#134441)
- Fix taint mode documentation regarding @INC
- Fix handling a layer argument in Tie::StdHandle::BINMODE() (RT#132475)
- Fix an unintended upgrade to UTF-8 in the middle of a transliteration
- Fix a race in File::stat() tests (GH#17234)
- Fix GCC 10 version detection (GH#17295)
- Fix a memory leak when compiling a regular expression with a non-word class
  (GH#17218)
- Fix a memory leak when matching a UTF-8 regular expression (RT#134390)
- Fix a detection for futimes (RT#134432)
- Fix propagating non-string variables in an exception value (RT#134291)
- Include trailing zero in scalars holding trie data (RT#134207)
- Fix a use after free in /(?{...})/ (RT#134208)
- Fix a use after free in debugging output of a collation
- Fix file mode of a perl-example.stp example
- Fix a NULL pointer dereference in PerlIOVia_pushed()
- Fix a crash when setting $@ on unwinding a call stack (RT#134266)
- Fix a documentation about a future API change
- Do not panic when evaluating non-ASCII bare words (RT#134061)
- Fix a crash in SIGALARM handler when waiting on a child process to be closed
  (RT#122112)
- Fix a crash with a negative precision in sprintf function (RT#134008)
- Prevent from wrapping a width in a numeric format string (RT#133913)
- Fix subroutine protypes to track reference aliases (RT#134072)
- Improve retrieving a scalar value of a variable modified in a signal handler
  (RT#134035)
- Fix changing packet destination sent from a UDP IO::Socket object (RT#133936)
- Fix a stack underflow in readline() if passed an empty array as an argument
  (#RT133989)
- Fix %%{^CAPTURE_ALL} to be an alias for %%- variable (RT#131867)
- Fix %%{^CAPTURE} value when used after @{^CAPTURE} (RT#134193)
- Fix a test for a crash in SIGALARM handler when waiting on a child process to
  be closed (RT#122112)
- Fix a crash on an uninitialized warning when processing a multideref node
  (RT#134275)
- Preserve append mode when opening anonymous files (RT#134221)

---

Revision 1470029 - Directory Listing
Modified Wed Dec 25 18:06:06 2019 UTC (4 years, 9 months ago) by tv

fix detecting zstd magic

---

Revision 1469993 - Directory Listing
Modified Wed Dec 25 17:14:35 2019 UTC (4 years, 9 months ago) by tmb

mod_dbd: only load mod_session_dbd if mod_session is available

---

Revision 1469987 - Directory Listing
Modified Wed Dec 25 16:37:44 2019 UTC (4 years, 9 months ago) by tmb

SILENT: add subrel

---

Revision 1469986 - Directory Listing
Modified Wed Dec 25 16:30:11 2019 UTC (4 years, 9 months ago) by tmb

mod_session: mod_auth_form requires mod_request (mga#25316)

---

Revision 1469866 - Directory Listing
Modified Tue Dec 24 12:57:11 2019 UTC (4 years, 9 months ago) by ns80

- fix permissions on /etc/freshclam.conf (mga#25940)

---

Revision 1469854 - Directory Listing
Modified Tue Dec 24 10:26:10 2019 UTC (4 years, 9 months ago) by ns80

- add upstream patches for CVE-2019-1310[89] (mga#25280)

---

Revision 1469826 - Directory Listing
Modified Tue Dec 24 07:31:59 2019 UTC (4 years, 9 months ago) by daviddavid

- new version: 3.0.20, fixes CVE-2019-10143 and CVE-2019-17185 (mga#25907)

---

Revision 1469814 - Directory Listing
Modified Tue Dec 24 06:08:59 2019 UTC (4 years, 9 months ago) by daviddavid

- add upstream patch to fix CVE-2019-15531 (mga#25945)

---

Revision 1469812 - Directory Listing
Modified Tue Dec 24 06:00:44 2019 UTC (4 years, 9 months ago) by daviddavid

- new version: 1.8.3 (for radare2 3.6.0) (mga#25933)

---

Revision 1469811 - Directory Listing
Modified Tue Dec 24 05:52:41 2019 UTC (4 years, 9 months ago) by daviddavid

- new version: 0.18, fixes CVE-2019-14267 and CVE-2019-14934 (mga#25942)

---

Revision 1469810 - Directory Listing
Modified Tue Dec 24 05:47:06 2019 UTC (4 years, 9 months ago) by daviddavid

- new version: 3.6.0, fixes CVE-2019-12790, CVE-2019-12802, CVE-2019-12865 (mga#25933)

---

Revision 1469799 - Directory Listing
Modified Tue Dec 24 01:31:46 2019 UTC (4 years, 9 months ago) by tmb

- update to 340.108 (official kernel 5.4 support)
  * drop obsolete patches

---

Revision 1469784 - Directory Listing
Modified Mon Dec 23 22:41:05 2019 UTC (4 years, 9 months ago) by tmb

rebuild for kernel-5.4.6-2.mga7

---

Revision 1469783 - Directory Listing
Modified Mon Dec 23 22:39:47 2019 UTC (4 years, 9 months ago) by tmb

rebuild for kernel-5.4.6-2.mga7

---

Revision 1469739 - Directory Listing
Modified Mon Dec 23 16:54:47 2019 UTC (4 years, 9 months ago) by daviddavid

- new version: 3.46.3
  * SFTP components have been updated and are now based on PuTTY 0.73
    to fix CVE-2019-17068 and CVE-2019-17069 (mga#25760)

---

Revision 1469738 - Directory Listing
Modified Mon Dec 23 16:52:11 2019 UTC (4 years, 9 months ago) by daviddavid

- new version: 0.19.3

---

Revision 1469700 - Directory Listing
Modified Mon Dec 23 14:05:09 2019 UTC (4 years, 9 months ago) by mokraemer

adding patch file

---

Revision 1469698 - Directory Listing
Modified Mon Dec 23 14:04:36 2019 UTC (4 years, 9 months ago) by mokraemer

patching fork bug (mga#25130)

---

Revision 1469682 - Directory Listing
Modified Mon Dec 23 11:44:01 2019 UTC (4 years, 9 months ago) by tmb

- Revert "iwlwifi: mvm: fix scan config command size" (mga#25926)

---

Revision 1469611 - Directory Listing
Modified Sun Dec 22 21:20:27 2019 UTC (4 years, 9 months ago) by pterjan

Add upstream patch to fix tests with recent openssl

---

Revision 1469532 - Directory Listing
Modified Sun Dec 22 14:55:41 2019 UTC (4 years, 9 months ago) by tmb

rebuild for kernel-5.4.6-1.mga7

---

Revision 1469531 - Directory Listing
Modified Sun Dec 22 14:54:39 2019 UTC (4 years, 9 months ago) by tmb

rebuild for kernel-5.4.6-1.mga7

---

Revision 1469498 - Directory Listing
Modified Sun Dec 22 12:42:03 2019 UTC (4 years, 9 months ago) by tmb

update to 5.4.0

---

Revision 1469483 - Directory Listing
Modified Sun Dec 22 09:33:10 2019 UTC (4 years, 9 months ago) by tmb

- iwlwifi: mvm: fix unaligned read of rx_pkt_status
- iwlwifi: fix GRO_NORMAL packet stalling
- iwlwifi: check kasprintf() return value
- rtw88: coex: Set 4 slot mode for A2DP
- rtw88: fix NSS of hw_cap

---

Revision 1469458 - Directory Listing
Modified Sun Dec 22 08:00:38 2019 UTC (4 years, 9 months ago) by daviddavid

- Updated version number to match Fedora Packaging Standards
- Rebase to upstream release 0.9.5.4
- Resolves rhbz#1709861 / CVE-2019-5427 (mga#25906)

---

Revision 1469453 - Directory Listing
Modified Sun Dec 22 07:50:14 2019 UTC (4 years, 9 months ago) by daviddavid

- new version: 1.10.1, fixes CVE-2019-1569[1-5] (mga#25917)

---

Revision 1469390 - Directory Listing
Modified Sun Dec 22 05:12:01 2019 UTC (4 years, 9 months ago) by daviddavid

- add patch to fix CVE-2019-19906 (mga#25914)

---

Revision 1469376 - Directory Listing
Modified Sat Dec 21 22:53:02 2019 UTC (4 years, 9 months ago) by tmb

- update to 20191220 snapshot
- iwlwifi: update FWs to core47-142 release

---

Revision 1469374 - Directory Listing
Modified Sat Dec 21 19:38:26 2019 UTC (4 years, 9 months ago) by tmb

update to 20191220 snapshot

---

Revision 1469368 - Directory Listing
Modified Sat Dec 21 17:01:16 2019 UTC (4 years, 9 months ago) by tmb

update to 0.0.20191219

---

Revision 1469363 - Directory Listing
Modified Sat Dec 21 16:56:13 2019 UTC (4 years, 9 months ago) by tmb

- update to 5.4.6
  * drop merged patches
- update WireGuard to 0.0.20191219
- Revert "drm/radeon: simplify and cleanup setting the dma mask"
- Revert "drm/radeon: handle PCIe root ports with addressing limitations"

---

Revision 1469343 - Directory Listing
Modified Sat Dec 21 14:56:11 2019 UTC (4 years, 9 months ago) by danf

Fix an invalid memory address while decoding corrupt PNG image (CVE-2019-8383) (bug #25908)

---

Revision 1469321 - Directory Listing
Modified Sat Dec 21 12:14:22 2019 UTC (4 years, 9 months ago) by kekepower

- Update to version 3.3 (mga#25920)

---

Revision 1469209 - Directory Listing
Modified Fri Dec 20 21:52:23 2019 UTC (4 years, 9 months ago) by daviddavid

- new version: 1.6.8, fixes multiple security issues (mga#25902)

---

Revision 1469208 - Directory Listing
Modified Fri Dec 20 21:47:47 2019 UTC (4 years, 9 months ago) by daviddavid

- new version: 2.5.15, fixes CVE-2019-19783 (25913)

---

Revision 1469003 - Directory Listing
Modified Thu Dec 19 16:49:14 2019 UTC (4 years, 9 months ago) by ns80

- SILENT: another fix for wrapper script when a path contains spaces

---

Revision 1468969 - Directory Listing
Modified Thu Dec 19 11:29:53 2019 UTC (4 years, 9 months ago) by wally

%repsys markrelease
version: 3.0.3
release: 7.2.mga7
revision: 1468921

Copying 3.0.3-7.2.mga7 to releases/ directory.

---

Revision 1468968 - Directory Listing
Modified Thu Dec 19 11:29:51 2019 UTC (4 years, 9 months ago) by wally

Copying release 3.0.3-7.2.mga7 to pristine/ directory.

---

Revision 1468967 - Directory Listing
Modified Thu Dec 19 11:29:49 2019 UTC (4 years, 9 months ago) by wally

Removing previous pristine/ directory.

---

Revision 1468960 - Directory Listing
Modified Thu Dec 19 10:05:28 2019 UTC (4 years, 9 months ago) by mokraemer

new version 7.3.13

---

Revision 1468921 - Directory Listing
Modified Thu Dec 19 09:00:46 2019 UTC (4 years, 9 months ago) by wally

- bump rel (SILENT)

---

Revision 1468920 - Directory Listing
Modified Thu Dec 19 09:00:26 2019 UTC (4 years, 9 months ago) by wally

- add patch originally from Fedora to disable anonymous access by default

---

Revision 1468919 - Directory Listing
Modified Thu Dec 19 08:56:28 2019 UTC (4 years, 9 months ago) by wally

- replace getdents64 patch with a patch from Arch to fix 'unable to list dirs w/ more than 31 items' (mga#25108)

---

Revision 1468900 - Directory Listing
Modified Thu Dec 19 08:12:06 2019 UTC (4 years, 9 months ago) by ns80

- SILENT: fix wrapper script when a path contains spaces

---

Revision 1468838 - Directory Listing
Modified Thu Dec 19 00:25:51 2019 UTC (4 years, 9 months ago) by tmb

rebuild for kernel-5.4.5-1.mga7

---

Revision 1468837 - Directory Listing
Modified Thu Dec 19 00:24:50 2019 UTC (4 years, 9 months ago) by tmb

rebuild for kernel-5.4.5-1.mga7

---

Revision 1468803 - Directory Listing
Modified Wed Dec 18 21:00:25 2019 UTC (4 years, 9 months ago) by tmb

- update to 19.3.1
- intel/fs: Lower 64-bit MOVs after lower_load_payload()
- radeonsi: dcc dirty flag
- st/mesa: add a notify_before_flush callback param to flush
- st/dri: use st->flush callback to flush the backbuffer

---

Revision 1468760 - Directory Listing
Modified Wed Dec 18 17:00:51 2019 UTC (4 years, 9 months ago) by tmb

- update AMD family 17h cpu microcode to 2019-12-18
- update Intel Microcode to 20191115

---

Revision 1468753 - Directory Listing
Modified Wed Dec 18 16:24:14 2019 UTC (4 years, 9 months ago) by tmb

- update to 5.4.5
  * drop merged patches
- platform/x86: hp-wmi: Make buffer for HPWMI_FEATURE2_QUERY 128 bytes

---

Revision 1468733 - Directory Listing
Modified Wed Dec 18 12:49:13 2019 UTC (4 years, 9 months ago) by tmb

rebuild for kernel-5.4.4-1.mga7

---

Revision 1468732 - Directory Listing
Modified Wed Dec 18 12:46:26 2019 UTC (4 years, 9 months ago) by tmb

rebuild for kernel-5.4.4-1.mga7

---

Revision 1468727 - Directory Listing
Modified Wed Dec 18 12:17:08 2019 UTC (4 years, 9 months ago) by ns80

- SILENT: add a wrapper for gpcl6 to solve the "Fonts not found" issue

---

Revision 1468697 - Directory Listing
Modified Wed Dec 18 06:48:11 2019 UTC (4 years, 9 months ago) by daviddavid

- new version: 0.7.2, fixes support rule priorities (mga#25889)

---

Revision 1468680 - Directory Listing
Modified Tue Dec 17 23:48:09 2019 UTC (4 years, 9 months ago) by tmb

- update to 5.4.4
  * drop merged patches
- add current -stable queue
- update to WireGuard to 0.0.20191212
- wireguard: adjust for ipv6_dst_lookup_flow() API change
- x86/MCE/AMD: Do not use rdmsr_safe_on_cpu() in smca_configure()
- iocost: over-budget forced IOs should schedule async delay
- nbd: fix shutdown and recv work deadlock
- enable IR_SERIAL (mga#24660)

---

Revision 1468679 - Directory Listing
Modified Tue Dec 17 23:39:41 2019 UTC (4 years, 9 months ago) by tmb

update to 0.0.20191212

---

Revision 1468608 - Directory Listing
Modified Tue Dec 17 11:58:00 2019 UTC (4 years, 9 months ago) by ns80

- SILENT: a "normal" package should not depend on devel packages

---

Revision 1468603 - Directory Listing
Modified Tue Dec 17 10:52:50 2019 UTC (4 years, 9 months ago) by ns80

- add upstream patches for CVE-2019-1311[0234] and CVE-2019-17402 (mga#25280)

---

Revision 1468601 - Directory Listing
Modified Tue Dec 17 09:55:51 2019 UTC (4 years, 9 months ago) by ns80

- add upstream patches for CVE-2018-1687[78] and CVE-2019-3885 (mga#24691)

---

Revision 1468595 - Directory Listing
Modified Tue Dec 17 08:39:12 2019 UTC (4 years, 9 months ago) by ns80

- add upstream patches for CVE-2019-13032 and CVE-2019-13241 (mga#25281)

---

Revision 1468363 - Directory Listing
Modified Mon Dec 16 18:31:32 2019 UTC (4 years, 9 months ago) by daviddavid

- add/rebase upstream patch to fix CVE-2019-19630 (mga#25876)

---

Revision 1468207 - Directory Listing
Modified Mon Dec 16 09:01:00 2019 UTC (4 years, 9 months ago) by ns80

- new version 3.4.3 (mga#25860)

---

Revision 1468141 - Directory Listing
Modified Mon Dec 16 05:36:33 2019 UTC (4 years, 9 months ago) by daviddavid

- add upstream patch to fix for "Too many open files" bug (mga#25888)

---

Revision 1467377 - Directory Listing
Modified Sun Dec 15 09:09:34 2019 UTC (4 years, 9 months ago) by daviddavid

- add upstream patches to fix CVE-2019-17041 and CVE-2019-17042 (mga#25811)

---

Revision 1467227 - Directory Listing
Modified Sat Dec 14 20:12:02 2019 UTC (4 years, 9 months ago) by buchan

Update to 4.10.11 mga#25644

---

Revision 1467226 - Directory Listing
Modified Sat Dec 14 20:07:42 2019 UTC (4 years, 9 months ago) by buchan

Update to 1.5.6

---

Revision 1466750 - Directory Listing
Modified Sat Dec 14 06:05:39 2019 UTC (4 years, 9 months ago) by daviddavid

- add patch to avoid a /usr/@DATADIRNAME@/locale/ directory (mga#25872)

---

Revision 1466700 - Directory Listing
Modified Sat Dec 14 01:22:08 2019 UTC (4 years, 9 months ago) by tmb

- update to 5.4.3
  * drop merged patches
- ACPI: HMAT: don't mix pxm and nid when setting memory target processor_pxm
- drm/i915/gt: Close race between engine_park and intel_gt_retire_requests
- drm/i915/gt: Adapt engine_park synchronisation rules for engine_retire
- drm/i915/gt: Schedule request retirement when timeline idles
- iwlwifi: pcie: move power gating workaround earlier in the flow
- x86/quirks: disable HPET on Intel Coffee Lake Refresh platforms
- x86/mm: Split vmalloc_sync_all()

---

Revision 1466691 - Directory Listing
Modified Fri Dec 13 22:56:47 2019 UTC (4 years, 9 months ago) by tmb

update to 2.4 (mga#25858)

---

Revision 1466685 - Directory Listing
Modified Fri Dec 13 22:33:57 2019 UTC (4 years, 9 months ago) by tmb

- update amdgpu ids from kernel 5.4.2
- update i915 ids from kernel 5.4.2
- update pci.ids and usb.ids

---

Revision 1466679 - Directory Listing
Modified Fri Dec 13 22:13:29 2019 UTC (4 years, 9 months ago) by zezinho

new bugfix version mga#25866

---

Revision 1466289 - Directory Listing
Modified Fri Dec 13 14:26:24 2019 UTC (4 years, 9 months ago) by kekepower

- Update to version 0.28.4 to fix several CVEs (mga#25348)

---

Revision 1466286 - Directory Listing
Modified Fri Dec 13 13:24:49 2019 UTC (4 years, 9 months ago) by ns80

- new version 2.21.1 for CVE-2019-134[89], CVE-2019-1387, CVE-2019-19604 (mga#25867)

---

Revision 1466268 - Directory Listing
Modified Fri Dec 13 12:52:20 2019 UTC (4 years, 9 months ago) by tmb

fix CVE-2019-14834 (mga#25854)

---

Revision 1466191 - Directory Listing
Modified Fri Dec 13 11:25:14 2019 UTC (4 years, 9 months ago) by luigiwalser

5.5.0 (mga#24757)

---

Revision 1466149 - Directory Listing
Modified Fri Dec 13 07:55:29 2019 UTC (4 years, 9 months ago) by ns80

- new version 3.4.3 for CVE-2018-11805 and CVE-2019-12420 (mga#25860)

---

Revision 1466113 - Directory Listing
Modified Fri Dec 13 02:54:36 2019 UTC (4 years, 9 months ago) by daviddavid

- new version: 3.3.3, fixes CVE-2019-5163 and CVE-2019-5164 (mga#25864)

---

Revision 1466112 - Directory Listing
Modified Fri Dec 13 00:24:35 2019 UTC (4 years, 9 months ago) by daviddavid

- add missing dependency on graphicsmagick (mga#25861)

---

Revision 1466107 - Directory Listing
Modified Fri Dec 13 00:21:39 2019 UTC (4 years, 9 months ago) by daviddavid

- new version: 0.8.8, fixes CVE-2019-14889 (mga#25865)

---

Revision 1466105 - Directory Listing
Modified Fri Dec 13 00:17:35 2019 UTC (4 years, 9 months ago) by tmb

properly fix SIOCGSTAMP support with newer kernels

---

Revision 1466048 - Directory Listing
Added Thu Dec 12 14:29:21 2019 UTC (4 years, 9 months ago) by ns80

- add upstream patches for CVE-2019-1449[12] and CVE-2019-15939 (mga#25855)